ELSA-2025-3208

ELSA-2025-3208 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-03-26

Description


[5.14.0-503.34.1_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.34.1_5]
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
- crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]


Related CVEs


CVE-2025-21785

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_aarch64_appstream
kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_aarch64_baseos_latest
kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_aarch64_codeready_builder
kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_aarch64_u5_baseos_patch
bpftool-7.4.0-503.34.1.el9_5.aarch64.rpma4b475e79cf8bf08159dd2f9bdce2ace455f06a369babfff4ced42f59f981388-ol9_aarch64_baseos_latest
bpftool-7.4.0-503.34.1.el9_5.aarch64.rpma4b475e79cf8bf08159dd2f9bdce2ace455f06a369babfff4ced42f59f981388-ol9_aarch64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.34.1.el9_5.aarch64.rpma1d7842df4b7057ab803dd0c5c8466a14971cbfef236b18e58bcb81029cc8c29-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-503.34.1.el9_5.aarch64.rpm20fea4483dfbfdaa74d77c565070d635accca8ef460f5d5d708db83b73a5ad74-ol9_aarch64_appstream
kernel-tools-5.14.0-503.34.1.el9_5.aarch64.rpm60001eb82cd109414b66acce237cc1ba4c9d3141278eaa4d4b12c71f87a75338-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-503.34.1.el9_5.aarch64.rpm60001eb82cd109414b66acce237cc1ba4c9d3141278eaa4d4b12c71f87a75338-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.34.1.el9_5.aarch64.rpm1e539ba598dcd18c49046f8506fda916f1428f6685b57a36e1acf4b997a863a0-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-503.34.1.el9_5.aarch64.rpm1e539ba598dcd18c49046f8506fda916f1428f6685b57a36e1acf4b997a863a0-ol9_aarch64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.34.1.el9_5.aarch64.rpm824fb7bc4137561b0b2513fdec8ad45c1b4e6f5e988a3172fd3ab7fcfdc1378e-ol9_aarch64_codeready_builder
perf-5.14.0-503.34.1.el9_5.aarch64.rpmb685e976c39dae64d52fd57056235add53ab4e10c31955cd2dbc1b895b16c236-ol9_aarch64_appstream
python3-perf-5.14.0-503.34.1.el9_5.aarch64.rpm0ca6c798abc5236638acc12f892bb3dfc2b854d27f0bf0e46fff5b31bba11858-ol9_aarch64_baseos_latest
python3-perf-5.14.0-503.34.1.el9_5.aarch64.rpm0ca6c798abc5236638acc12f892bb3dfc2b854d27f0bf0e46fff5b31bba11858-ol9_aarch64_u5_baseos_patch
rtla-5.14.0-503.34.1.el9_5.aarch64.rpm33a5a49797e5d4e5b2cdf432e5f3639775de7f5112717134d02b9cb625c1c437-ol9_aarch64_appstream
rv-5.14.0-503.34.1.el9_5.aarch64.rpm511d208f62160d0cb6537841328fcc9a96c00b31e7f91dbde9436128be5177a9-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_x86_64_appstream
kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_x86_64_baseos_latest
kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_x86_64_codeready_builder
kernel-5.14.0-503.34.1.el9_5.src.rpm8c9e587e63b4a50d13605c0f3e2d41c66da25cdb4e7d7184ec8168b35390dcfb-ol9_x86_64_u5_baseos_patch
bpftool-7.4.0-503.34.1.el9_5.x86_64.rpma8a61a2d8b7bf602665722e7d8ebe30bd77d86a6129be4f2856bdc1e31a43382-ol9_x86_64_baseos_latest
bpftool-7.4.0-503.34.1.el9_5.x86_64.rpma8a61a2d8b7bf602665722e7d8ebe30bd77d86a6129be4f2856bdc1e31a43382-ol9_x86_64_u5_baseos_patch
kernel-5.14.0-503.34.1.el9_5.x86_64.rpmb120e576e552f82572bb82522f16ac693261c8e28294137712d816453909dc45-ol9_x86_64_baseos_latest
kernel-5.14.0-503.34.1.el9_5.x86_64.rpmb120e576e552f82572bb82522f16ac693261c8e28294137712d816453909dc45-ol9_x86_64_u5_baseos_patch
kernel-abi-stablelists-5.14.0-503.34.1.el9_5.noarch.rpmf6d2d5d3b970b979305d9ef264222b5e5151f3cd422d6e732446d06de7e04a19-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-503.34.1.el9_5.noarch.rpmf6d2d5d3b970b979305d9ef264222b5e5151f3cd422d6e732446d06de7e04a19-ol9_x86_64_u5_baseos_patch
kernel-core-5.14.0-503.34.1.el9_5.x86_64.rpm1d1de0722050a3d085af6663d5ddd670a24c0c6b6417b2d7d237ded17e39a91a-ol9_x86_64_baseos_latest
kernel-core-5.14.0-503.34.1.el9_5.x86_64.rpm1d1de0722050a3d085af6663d5ddd670a24c0c6b6417b2d7d237ded17e39a91a-ol9_x86_64_u5_baseos_patch
kernel-cross-headers-5.14.0-503.34.1.el9_5.x86_64.rpmbd1d328568d5bbe243ec13e1698d2bc454620f92bdfafa8fb92c19fba397d806-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-503.34.1.el9_5.x86_64.rpm025133dc3f16ea45532d87fc34176eb76fe4b6838677658e65d7443411838814-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-503.34.1.el9_5.x86_64.rpm025133dc3f16ea45532d87fc34176eb76fe4b6838677658e65d7443411838814-ol9_x86_64_u5_baseos_patch
kernel-debug-core-5.14.0-503.34.1.el9_5.x86_64.rpm5eac82b7877df7fbbc6e64e9d5fb1c42c7fa2bb472f3d29d4892ec2a7e9de20c-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-503.34.1.el9_5.x86_64.rpm5eac82b7877df7fbbc6e64e9d5fb1c42c7fa2bb472f3d29d4892ec2a7e9de20c-ol9_x86_64_u5_baseos_patch
kernel-debug-devel-5.14.0-503.34.1.el9_5.x86_64.rpm75e7c8646de8570f4d6004bb9c29080a8ca67d4daa7829354baeb7c197ed8dd0-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-503.34.1.el9_5.x86_64.rpma1a7c5d0eb109d0893df81928d460b4aee970b55e3432e900208ca68b3d202fd-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-503.34.1.el9_5.x86_64.rpm4d932043d65292d3bf17242c3e0d7f9a944121c7f0aa55947cc6b647c6223d26-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-503.34.1.el9_5.x86_64.rpm4d932043d65292d3bf17242c3e0d7f9a944121c7f0aa55947cc6b647c6223d26-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-core-5.14.0-503.34.1.el9_5.x86_64.rpmcfc78954f52b20cfb20be3d68a34b44b0325264da68f12b2850a43d3c07f4321-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-503.34.1.el9_5.x86_64.rpmcfc78954f52b20cfb20be3d68a34b44b0325264da68f12b2850a43d3c07f4321-ol9_x86_64_u5_baseos_patch
kernel-debug-modules-extra-5.14.0-503.34.1.el9_5.x86_64.rpm0532157b22acbe26d806530e0bd9c38ed935073c3893cb17bc08826791767cb7-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-503.34.1.el9_5.x86_64.rpm0532157b22acbe26d806530e0bd9c38ed935073c3893cb17bc08826791767cb7-ol9_x86_64_u5_baseos_patch
kernel-debug-uki-virt-5.14.0-503.34.1.el9_5.x86_64.rpmeec44418d027d2bc69cb01179835c77bc00f4b36d92e542ef588e7addfc8d92a-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-503.34.1.el9_5.x86_64.rpmeec44418d027d2bc69cb01179835c77bc00f4b36d92e542ef588e7addfc8d92a-ol9_x86_64_u5_baseos_patch
kernel-devel-5.14.0-503.34.1.el9_5.x86_64.rpm1d70c661910b22d47b0e80f591a88ce3c643287c5bfd52ea114e670d4e961def-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-503.34.1.el9_5.x86_64.rpmf3f6d5f003eafd864f0f1f194999c9934b489aad9f63c2a38710de06b67487ce-ol9_x86_64_appstream
kernel-doc-5.14.0-503.34.1.el9_5.noarch.rpmd2672aacdb1133971209b347dea6d8aa41dfb882dc58772081075a9ca7921a69-ol9_x86_64_appstream
kernel-headers-5.14.0-503.34.1.el9_5.x86_64.rpm687c64cb7044352fbdddbf599b60684bbc55236db1736a51394fd3efd725f695-ol9_x86_64_appstream
kernel-modules-5.14.0-503.34.1.el9_5.x86_64.rpmb3cca3fa6d46f21de0ddfbc552868f2355461ab6b45d6e83cec2f2816f9d11b7-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-503.34.1.el9_5.x86_64.rpmb3cca3fa6d46f21de0ddfbc552868f2355461ab6b45d6e83cec2f2816f9d11b7-ol9_x86_64_u5_baseos_patch
kernel-modules-core-5.14.0-503.34.1.el9_5.x86_64.rpmd9183ab6c2c349ff619381d72cf53813231c6961d52488e0539e6cc2c2b7ddb6-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-503.34.1.el9_5.x86_64.rpmd9183ab6c2c349ff619381d72cf53813231c6961d52488e0539e6cc2c2b7ddb6-ol9_x86_64_u5_baseos_patch
kernel-modules-extra-5.14.0-503.34.1.el9_5.x86_64.rpmeb91808854ba221b370266140081c12a68005b24b6ec9de0cde04a0fbaf8de86-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-503.34.1.el9_5.x86_64.rpmeb91808854ba221b370266140081c12a68005b24b6ec9de0cde04a0fbaf8de86-ol9_x86_64_u5_baseos_patch
kernel-tools-5.14.0-503.34.1.el9_5.x86_64.rpm3520f0785a9965ab3502d255021888ad048d08f9c9e986877de257161f9730b7-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-503.34.1.el9_5.x86_64.rpm3520f0785a9965ab3502d255021888ad048d08f9c9e986877de257161f9730b7-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-5.14.0-503.34.1.el9_5.x86_64.rpmd8a2aff61c5a07b261db26bffcde7c6da4207cc81264cce2e304c62ee7429cbe-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-503.34.1.el9_5.x86_64.rpmd8a2aff61c5a07b261db26bffcde7c6da4207cc81264cce2e304c62ee7429cbe-ol9_x86_64_u5_baseos_patch
kernel-tools-libs-devel-5.14.0-503.34.1.el9_5.x86_64.rpm1026216bfc63ca46ea900de60c6246622822d1d799bbf36a81278211d58cf74a-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-503.34.1.el9_5.x86_64.rpmd604a865eba6c3bc6f7ce1364ffd97ff1e1527e2a4140bde47c6cc4fb391d28b-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-503.34.1.el9_5.x86_64.rpmd604a865eba6c3bc6f7ce1364ffd97ff1e1527e2a4140bde47c6cc4fb391d28b-ol9_x86_64_u5_baseos_patch
kernel-uki-virt-addons-5.14.0-503.34.1.el9_5.x86_64.rpmc37fe2cc9ed693536b29ef2a35cdaf686328b03b02573bd79f738f03d6d1e14b-ol9_x86_64_baseos_latest
kernel-uki-virt-addons-5.14.0-503.34.1.el9_5.x86_64.rpmc37fe2cc9ed693536b29ef2a35cdaf686328b03b02573bd79f738f03d6d1e14b-ol9_x86_64_u5_baseos_patch
libperf-5.14.0-503.34.1.el9_5.x86_64.rpm193df7c24e6db5529eef4093fe9821b6f396d0f0c3f4766dc12c78f0f0a1ac19-ol9_x86_64_codeready_builder
perf-5.14.0-503.34.1.el9_5.x86_64.rpm309dd24f78b66c28984cc31d517d8dac20ec2464be2b2ec32d787f16a49a81c0-ol9_x86_64_appstream
python3-perf-5.14.0-503.34.1.el9_5.x86_64.rpm1c383a25a3fbc7f0ddc13ee67cd166c00995ee4a64e13b5c9731a19a070d5300-ol9_x86_64_baseos_latest
python3-perf-5.14.0-503.34.1.el9_5.x86_64.rpm1c383a25a3fbc7f0ddc13ee67cd166c00995ee4a64e13b5c9731a19a070d5300-ol9_x86_64_u5_baseos_patch
rtla-5.14.0-503.34.1.el9_5.x86_64.rpmefd830e711df94655bbf3757ff576ee824d15fa6b4983288a693adc8ac88527e-ol9_x86_64_appstream
rv-5.14.0-503.34.1.el9_5.x86_64.rpme56c52498e2ede909eed0873226a96e42493057d89e41ca2e99f747e983b2409-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete